Manifest

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/HYA/Dq4tMx8sQoDBaqi6_hb93M43FbQ.mft
File:                     Dq4tMx8sQoDBaqi6_hb93M43FbQ.mft (raw, json)
Hash identifier:          mO2NRTwWpczMI04HNJPslu8dMXwpEyIYscq+f8c7eBg=
Subject key identifier:   36:20:F5:F3:91:F2:D3:F8:76:E9:2D:33:8C:F4:36:A3:F9:6A:53:6C
Authority key identifier: 0E:AE:2D:33:1F:2C:42:80:C1:6A:A8:BA:FE:16:FD:DC:CE:37:15:B4
Certificate issuer:       /CN=0EAE2D331F2C4280C16AA8BAFE16FDDCCE3715B4
Certificate serial:       0D2F
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/Dq4tMx8sQoDBaqi6_hb93M43FbQ.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/HYA/Dq4tMx8sQoDBaqi6_hb93M43FbQ.mft
Manifest number:          0D10
Signing time:             Sat 29 Mar 2025 09:04:42 +0000
Manifest this update:     Sat 29 Mar 2025 09:04:42 +0000
Manifest next update:     Mon 31 Mar 2025 09:04:42 +0000
Files and hashes:         1: 1ZcvVn95Uv4WJTrC4OPXmEmhHE0.roa (hash: Q/F525NLgItfw5z0vpk4FsnjSSpBqOrT6QRCUqAX/Pw=)
                          2: Dq4tMx8sQoDBaqi6_hb93M43FbQ.crl (hash: RwFHSpEwqtCxoEIRTfGWAGNhyr7G2YZFTAzvCGLR5zE=)
                          3: KPXOcgSb1A8x_McR8M_39Q45E3s.roa (hash: R/oNRrgAfS676Kx8i4u+Z9MhX98ryHZ2FgZJpx8wpXg=)
                          4: M1Nqv1hBKDReP9iCa2nJKywsgCI.roa (hash: qmMra/ei0qVbFrOkUHNT8hJBqzgW0BQLtk/z5NpEP6E=)
                          5: ga-INOPHpVp2g7d-5H7L8uBblv0.roa (hash: DEggxyrJ6wcFXTapxX0+l5M0J0hI07JgkPTBPSOcMoM=)
                          6: l49m4yMWUvMQA4FOV7T__nYFlbs.roa (hash: FdreOVZvPiOUwKeQ7SHFwJibPjU6jU5zTjYMHnymwRs=)
                          7: rN4be_mOKz3Yvexhpx5daCdTpZk.roa (hash: zgI/OYcpzXgj84LHhC7E28OxKEfPS7ny+4u1kf0NncU=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3375 (0xd2f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0EAE2D331F2C4280C16AA8BAFE16FDDCCE3715B4
        Validity
            Not Before: Mar 29 09:04:42 2025 GMT
            Not After : Aug 26 01:57:03 2025 GMT
        Subject: CN=3620F5F391F2D3F876E92D338CF436A3F96A536C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:bb:59:0a:c7:b0:89:f4:cf:cc:dd:4a:80:17:
                    b7:2e:96:a6:db:53:a3:d3:64:73:82:a5:ab:fa:b1:
                    0c:d9:2a:a0:72:ae:41:98:81:ef:b3:34:f5:6f:dd:
                    25:6a:17:50:15:8e:df:50:28:a1:7b:e7:58:84:2f:
                    92:6c:eb:91:8b:b8:d3:50:30:09:14:8e:93:b7:ff:
                    9a:be:d2:55:ec:0b:c4:c7:de:92:9a:5d:23:48:69:
                    44:6b:31:aa:1f:32:6f:5e:68:ed:18:bc:bd:33:fb:
                    6a:02:4b:a3:fd:e1:4e:50:5a:0f:9a:3f:37:48:71:
                    b3:e0:40:aa:4e:37:78:c9:69:c5:c2:90:09:3b:53:
                    53:d4:f8:8b:eb:e7:eb:60:4c:ce:ae:c1:21:99:d4:
                    c9:e0:17:ab:7e:81:e5:81:35:2f:41:10:07:d7:a8:
                    f6:ca:b2:d1:9b:22:36:e4:82:05:f2:0f:20:97:d4:
                    34:91:51:82:ca:cf:bd:83:a8:e3:30:4a:58:cc:ac:
                    02:fb:ac:26:d5:e4:3e:3e:25:a5:af:92:de:cc:3e:
                    a3:49:ea:29:15:d8:07:f0:39:2b:3d:39:c9:e3:c9:
                    14:c7:2a:27:29:e5:23:6e:d1:a2:45:be:13:22:e7:
                    2e:d1:b5:18:da:94:0f:c0:b6:a1:9a:74:70:3a:1e:
                    b2:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                36:20:F5:F3:91:F2:D3:F8:76:E9:2D:33:8C:F4:36:A3:F9:6A:53:6C
            X509v3 Authority Key Identifier:
                keyid:0E:AE:2D:33:1F:2C:42:80:C1:6A:A8:BA:FE:16:FD:DC:CE:37:15:B4

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/HYA/Dq4tMx8sQoDBaqi6_hb93M43FbQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/Dq4tMx8sQoDBaqi6_hb93M43FbQ.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/HYA/Dq4tMx8sQoDBaqi6_hb93M43FbQ.mft
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         76:7d:3f:a4:eb:a6:29:67:35:14:99:dd:cd:39:a0:9b:75:f5:
         4e:d3:00:5b:ef:4c:0c:4d:f5:21:66:a3:51:96:f6:4d:9b:fb:
         c1:18:87:94:08:3b:53:4c:c8:d1:f4:47:0d:b2:a3:be:b9:59:
         50:ac:92:13:3a:64:e1:5a:98:11:01:da:ea:cd:66:88:d0:dd:
         11:15:fb:2b:94:87:f7:c3:28:f5:93:5a:26:6a:0f:fb:3b:45:
         e1:76:1b:f6:7d:85:c9:b2:da:95:4b:f6:5f:30:d4:68:a3:84:
         34:46:74:4f:b6:be:04:23:7a:52:32:fe:e8:64:6b:a4:0a:76:
         84:79:96:24:8a:92:47:90:81:73:fd:f4:d7:7b:4e:60:21:1c:
         06:18:cd:03:9e:ce:24:a6:55:8f:0a:6f:e6:ab:f0:31:c3:4d:
         3e:ce:a9:7f:c4:36:b3:03:af:d5:7d:31:3e:21:7e:4b:7a:74:
         13:db:13:12:f1:a8:17:b4:6f:ac:70:c2:75:96:bf:d7:6f:0d:
         36:a6:59:c7:15:c1:b1:26:7b:59:98:20:96:11:76:88:ab:6c:
         a5:a9:df:a0:2a:36:eb:a9:1b:e0:17:f2:a2:ea:a4:63:82:80:
         c8:0f:2b:3f:b2:49:fb:51:a6:0d:12:8f:62:29:3f:fd:c5:53:
         8c:52:15:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----